Digital Omnibus Incident Reporting: Council Position

Digital Omnibus incident reporting: brushed steel dial with a glowing green scale arc and a blue pointer on black

The Council of the European Union has agreed its negotiating position on changes that could reshape Digital Omnibus incident reporting: how organisations report personal-data breaches and cybersecurity incidents. For MSPs and MSSPs that run incident response for clients, the proposals could matter a great deal. They are not law yet. What Happened On 21 October…

Read More

AhsayCBS Backup Server Vulnerability Exploited

AhsayCBS backup server vulnerability under attack: Huntress says version 10.3.4 is affected too. Restrict the console and hunt for web shells now.

An AhsayCBS backup server vulnerability is being exploited, and the version everyone was told to install did not fix it. Huntress saw attackers chain two flaws from October 7 to run code as SYSTEM on exposed Ahsay Cloud Backup Servers. On October 8 it found that 10.3.4, the release the public CVE entries call fixed,…

Read More

N-able N-central RCE Vulnerability Hit Again

N-able N-central RCE Vulnerability Hit Again

An N-able N-central RCE vulnerability has forced the vendor to ship its fourth emergency hotfix in five weeks, and Huntress investigators say a customer’s server — already patched against an earlier round of flaws — was compromised a second time anyway. Tracked as CVE-2026-86218 with a maximum CVSS score of 10.0, the flaw hits a…

Read More

N-central CVE-2026-18577 Auth Bypass — CISA 3-Day Deadline

N-central CVE-2026-18577 Auth Bypass — CISA 3-Day Deadline

N-central CVE-2026-18577 auth bypass is being actively exploited to seize administrative control of N-able N-central servers — a remote monitoring and management (RMM) platform managed service providers (MSPs) use to run client networks. CISA gave federal civilian agencies just three days to patch, with the deadline landing August 6, 2026. What Happened N-able disclosed that…

Read More

Check Point SmartConsole CVE-2026-16232: Admin Bypass

Check Point SmartConsole CVE-2026-16232: Admin Bypass

Check Point SmartConsole CVE-2026-16232 is now on CISA’s Known Exploited Vulnerabilities list: an unauthenticated attacker can forge a login token and get full administrator access to the console that manages an organization’s entire firewall fleet. Check Point patched it on July 22 and confirmed a handful of customers were already targeted. The federal remediation deadline…

Read More